Skip to content

Conversation

@github-actions
Copy link
Contributor

You can preview this rule here (updated a few minutes after each push).

Review

A dedicated reviewer checked the rule description successfully for:

  • logical errors and incorrect information
  • information gaps and missing content
  • text style and tone
  • PR summary and labels follow the guidelines

Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Please also adjust the PR title to follow the pattern used in this repository for new rules.

@@ -0,0 +1,56 @@
{
"title": "Azure DevOps app secret should not be disclosed",

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Suggested change
"title": "Azure DevOps app secret should not be disclosed",
"title": "Azure DevOps app secrets should not be disclosed",

For consistency with other secret rules.

Comment on lines 124 to 125
username = redacted # Compliant
# password = # Store it with keyring module

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Suggested change
username = redacted # Compliant
# password = # Store it with keyring module
username = redacted
# password = # Compliant (password is stored in the keyring module)

The compliant marker should be on the line that is compliant, would this work?

@sonarqube-next
Copy link

Quality Gate passed Quality Gate passed for 'rspec-tools'

Issues
0 New issues
0 Fixed issues
0 Accepted issues

Measures
0 Security Hotspots
0 Dependency risks
No data about Coverage
No data about Duplication

See analysis details on SonarQube

@sonarqube-next
Copy link

Quality Gate passed Quality Gate passed for 'rspec-frontend'

Issues
0 New issues
0 Fixed issues
0 Accepted issues

Measures
0 Security Hotspots
1 Dependency risk
No data about Coverage
No data about Duplication

See analysis details on SonarQube

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants